Home Malware Programs Remote Administration Tools Network Crack Wizard

Network Crack Wizard

Posted: March 28, 2006

This is a Remote Administration Tool that is used by hackers to control the victim's machine remotely. The possibilities of such applications depend on the needs of the attacker. The attacker infects the PC via the e-mail or File and Print Sharing. A "server" allows him to connect via a "client" on his own machine. The functions of a RAT may vary, depending on the needs of the hacker. Some RATs can't really harm your PC and the only purpose they were made for is hooliganism. But some versions can steal vital information, remove files and even crash your computer. This version has the ability to steal passwords. It also creates a "backdoor" in the security computer of the victim, allowing the intruder to connect completely unnoticed. The author is a hacker called GHF. The "client" is written in Borland C++ and the "server" in Delphi applicationming language. This RAT originated in May 2000.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 file_id.diz
    2 hooklib.dll
    3 internat.exe
    4 mssys_32.exe
    5 ncw.exe
    6 readme.txt
    7 recoder.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionunservicesmssystemset
Loading...